Yahoo!ブãƒã‚°ã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸ | 水無月ã°ã‘らã®ãˆã³æ—¥è¨˜å±Šã‘出ã¦ã„ãŸYahoo!ブãƒã‚° (blogs.yahoo.co.jp)ã®XSS脆弱性ãŒä¿®æ£ã•ã‚ŒãŸã‚ˆã†ãªã®ã§ã€ã€ŒFirefoxã§ã¯embedã®srcã«æ›¸ã‹ã‚ŒãŸã‚¹ã‚¯ãƒªãƒ—トãŒå‹•ä½œã™ã‚‹ã€ã¨ã„ã†ãŠè©±ã§ä¼ã›ã¦ã„ãŸéƒ¨åˆ†ã‚’公開ã—ã¾ã—ãŸã€‚ Yahoo!ブãƒã‚°ã§ã¯ä»–ã®ãƒ¦ãƒ¼ã‚¶ã¨ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’共用ã—ã¦ã„ã¾ã™ã—ã€ç®¡ç†ç”»é¢ã‚‚åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã™ã®ã§ã€ãƒ–ãƒã‚°ã§ã‚¹ã‚¯ãƒªãƒ—トãŒå‹•ä½œã™ã‚‹ã¨ã‚ã¾ã‚Šè‰¯ããªã„ã“ã¨ãŒèµ·ã“ã‚Šã¾ã™ã€‚ãã—ã¦ã€ç‹¬è‡ªã®Wiki記法㧠img è¦ç´ ã‚„ embed è¦ç´ を書ã‘ã‚‹ã®ã§ã™ãŒã€ [[img(javascript:alert(document.cookie))]] [[item(javascript:alert(document.cookie))]]
{{#tags}}- {{label}}
{{/tags}}